Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/o6B5lEGP49LHkD6jMaKkLXO3GM4.roa
File:                     o6B5lEGP49LHkD6jMaKkLXO3GM4.roa (raw, json)
Hash identifier:          OoAyeYH1i2kT2wb7bomqFqaf1/FUDzUQRMHHShM0x3Q=
Subject key identifier:   A3:A0:79:94:41:8F:E3:D2:C7:90:3E:A3:31:A2:A4:2D:73:B7:18:CE
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       2C
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/o6B5lEGP49LHkD6jMaKkLXO3GM4.roa
Signing time:             Tue 25 May 2021 02:26:54 +0000
ROA not before:           Tue 25 May 2021 02:26:54 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     45680
IP address blocks:        218.100.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: May 25 02:26:54 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=A3A07994418FE3D2C7903EA331A2A42D73B718CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:79:3f:1b:dc:23:48:12:32:d0:5b:70:99:d6:
                    31:f2:a1:0e:c2:36:f8:74:7d:60:b3:7d:5f:8f:1f:
                    d9:42:5e:cc:98:17:e3:2e:23:84:ef:3a:d7:5b:b5:
                    17:57:3b:db:2e:eb:6c:04:0d:0f:62:1b:01:ce:c1:
                    a7:01:e1:21:94:27:f6:2f:6f:e2:37:98:16:86:96:
                    58:a9:f4:5c:9d:c7:ad:a4:da:4d:a9:f5:aa:1e:7b:
                    98:38:d5:60:81:15:32:ce:95:c4:ac:03:b9:b2:04:
                    cf:11:af:26:96:1b:ef:ed:8c:c7:e5:9c:4c:34:7f:
                    a6:a5:ad:39:67:1c:f9:22:2b:5f:de:43:5e:f5:86:
                    33:f2:b2:05:1d:e5:71:a2:fd:75:bd:b7:9d:6c:40:
                    78:03:d3:e0:c0:c9:bc:e7:59:07:5a:e8:b2:97:d2:
                    83:9c:1b:5e:99:e5:36:a0:cc:9b:5b:89:86:99:b6:
                    9c:fb:2b:89:7e:9e:1b:a9:9b:fe:18:67:0f:42:3d:
                    82:ea:d2:cc:2b:aa:38:c4:09:2e:32:b0:f3:aa:31:
                    e6:e1:ca:59:aa:ad:2e:87:83:ab:26:52:aa:cd:d5:
                    2a:29:84:bc:d6:af:b1:a2:23:b8:42:eb:df:7d:3b:
                    95:d2:8a:f3:0b:3d:a6:a7:cf:7b:e9:7c:a7:bb:66:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A0:79:94:41:8F:E3:D2:C7:90:3E:A3:31:A2:A4:2D:73:B7:18:CE
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/o6B5lEGP49LHkD6jMaKkLXO3GM4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.100.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:0a:2b:e2:1a:d4:c4:99:93:6f:9a:17:ba:d6:e8:2e:1b:24:
         af:9c:13:a2:38:5f:6d:74:ba:15:28:5c:23:d7:c7:0f:1f:9e:
         fc:52:74:db:c6:11:a4:50:db:87:d2:e1:99:49:88:ca:a1:e4:
         2c:b4:0b:ae:1a:a7:f0:8d:be:63:5d:b3:54:a3:30:84:3e:9f:
         1a:31:14:66:fd:a7:92:d9:6b:79:8e:cf:b7:9e:60:41:02:55:
         b1:52:dc:25:ec:26:ab:2a:85:09:3b:0e:81:d4:8f:72:61:79:
         d2:93:71:40:ad:88:e3:57:18:bb:aa:d8:72:d1:d1:c1:bf:03:
         13:e7:f3:09:16:de:62:ff:2c:bf:39:91:e6:81:7d:66:c2:3f:
         f4:3b:97:57:cd:5b:cf:08:89:6c:9a:ef:bb:6c:b6:13:e1:0b:
         ba:b5:07:0f:d2:c4:bd:bb:6e:13:d3:05:ec:53:08:ad:2d:39:
         b9:43:2d:34:40:86:f7:73:05:73:4a:90:90:bd:ab:6e:3f:91:
         f5:6b:a9:55:d2:12:12:62:b3:43:5e:16:c6:d3:bb:cb:d7:5d:
         4b:96:ca:4e:48:73:28:55:41:6c:74:e9:01:5e:16:29:a0:88:
         1c:2a:b4:de:6f:45:c3:95:33:68:e3:6d:dd:e8:34:5d:78:62:
         03:dd:2f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----